$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa File: 6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa (raw, json) Hash identifier: Q7oPbXbn8Mwq/KaJcdK76ryUMtXcH2LpQrHln6gmjDo= Subject key identifier: C5:64:F9:9D:2C:12:1F:FF:2A:43:B8:C2:B0:E8:15:C5:11:4E:EF:FD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4699194BB98139738869B3BF2291D66DD9ACCA01 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa Signing time: Mon 08 Sep 2025 18:37:13 +0000 ROA not before: Mon 08 Sep 2025 18:37:13 +0000 ROA not after: Mon 13 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:99:19:4b:b9:81:39:73:88:69:b3:bf:22:91:d6:6d:d9:ac:ca:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 8 18:37:13 2025 GMT Not After : Oct 13 23:59:59 2025 GMT Subject: serialNumber=915a918b2b1a75da67f38754b2941a348f3218fcce10fd1688e2d113ec4f5210, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:ff:4c:ba:d2:8e:d7:2c:92:93:22:59:d5: 93:cd:37:9b:89:37:45:f1:e2:82:e9:e7:0a:48:f0: f1:5b:93:6d:ad:93:99:e1:77:00:a8:12:4c:48:fa: 58:c8:d8:97:6c:de:a0:b6:b9:16:77:e6:a8:e9:47: 5a:f4:b5:ad:67:c1:25:04:cf:2e:72:77:a4:c4:07: 75:e7:c1:3c:56:8a:46:f6:1a:d6:8c:48:1b:f8:8e: ed:77:38:14:2c:ec:5d:9f:51:fa:b0:c3:9c:f6:1b: 49:51:94:77:92:90:02:d9:c2:8d:a0:bc:14:79:2e: 85:08:77:61:d8:e7:1f:c6:67:25:b3:38:78:53:d7: 36:7e:4d:18:7f:71:c8:d7:62:33:6d:34:05:be:8c: 85:d8:8b:9a:1d:0e:08:ee:46:23:00:0c:e7:38:cd: c9:7a:89:29:8a:b3:e3:48:0b:23:18:eb:5c:89:36: 1c:ab:b4:c2:fc:6c:30:d3:7c:52:a1:24:d5:87:9a: 78:ff:a0:8e:d4:2a:1c:7e:9f:73:67:d9:13:ce:84: df:89:e0:1d:05:93:47:5c:eb:2b:8a:25:dc:6c:d9: 0e:5c:dc:ff:e0:d3:12:59:45:ae:f0:12:a3:30:9f: 3a:c0:14:9d:df:a8:ba:e1:62:54:c2:88:3d:c7:4b: af:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:64:F9:9D:2C:12:1F:FF:2A:43:B8:C2:B0:E8:15:C5:11:4E:EF:FD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f105::/48 Signature Algorithm: sha256WithRSAEncryption 73:e6:67:e6:1e:d8:f9:f7:7d:78:76:32:9c:3d:e7:4b:21:8b: 2d:5b:f8:c5:f0:ba:6b:4b:b9:95:ab:ec:70:5e:ab:2f:13:0c: d3:53:2e:0e:f6:98:4d:76:3a:0f:b6:da:e2:87:86:91:24:23: 0c:be:87:11:49:db:dc:fc:0c:17:1c:d4:0a:34:64:e9:bf:cb: 23:f0:d7:5e:1f:92:79:da:53:9f:a3:55:54:9d:72:0f:41:06: e4:34:0f:36:4f:1d:35:57:e3:7f:83:fe:e6:52:0a:dc:73:6a: 23:0b:e9:99:fc:0b:a8:be:fa:a0:f5:ed:f7:5e:13:a0:87:18: 60:b6:c5:36:33:fe:ce:ca:98:bd:58:ee:b5:c8:a5:7e:22:d6: cb:61:75:49:c8:88:01:3e:71:cb:a7:fe:63:cb:fb:1d:c2:8f: be:fb:41:fd:f7:ad:61:5b:8e:be:9d:ed:56:f4:e2:a4:28:b6: 90:ab:32:1c:50:ea:76:61:7f:d9:6e:d3:53:43:65:99:82:ef: 23:b9:55:a4:cf:a4:c5:55:82:b8:e7:8d:51:e1:8c:7d:87:f1: a7:6e:8a:06:00:18:b2:5d:c1:24:8a:9a:19:1c:f5:8c:0c:ec: 0a:7b:a8:2a:e4:d3:15:a8:b1:4f:9e:a0:ce:f5:8f:eb:31:15: af:9f:6c:a4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURpkZS7mBOXOIabO/IpHWbdmsygEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTA4MTgzNzEzWhcNMjUxMDEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTVhOTE4YjJiMWE3NWRhNjdmMzg3NTRiMjk0MWEzNDhm MzIxOGZjY2UxMGZkMTY4OGUyZDExM2VjNGY1MjEwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmIf9MutKO1yySkyJZ1ZPNN5uJN0Xx4oLp5wpI8PFbk22t k5nhdwCoEkxI+ljI2Jds3qC2uRZ35qjpR1r0ta1nwSUEzy5yd6TEB3XnwTxWikb2 GtaMSBv4ju13OBQs7F2fUfqww5z2G0lRlHeSkALZwo2gvBR5LoUId2HY5x/GZyWz OHhT1zZ+TRh/ccjXYjNtNAW+jIXYi5odDgjuRiMADOc4zcl6iSmKs+NICyMY61yJ NhyrtML8bDDTfFKhJNWHmnj/oI7UKhx+n3Nn2RPOhN+J4B0Fk0dc6yuKJdxs2Q5c 3P/g0xJZRa7wEqMwnzrAFJ3fqLrhYlTCiD3HS69HAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxWT5nSwSH/8qQ7jCsOgVxRFO7/0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZkZGEzYmYzLTAyMmQtNGNhMS1hYjY4LWViNzNlZjM2NTU4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QUwDQYJKoZIhvcNAQELBQADggEBAHPmZ+Ye2Pn3fXh2Mpw950sh iy1b+MXwumtLuZWr7HBeqy8TDNNTLg72mE12Og+22uKHhpEkIwy+hxFJ29z8DBcc 1Ao0ZOm/yyPw114fknnaU5+jVVSdcg9BBuQ0DzZPHTVX43+D/uZSCtxzaiML6Zn8 C6i++qD17fdeE6CHGGC2xTYz/s7KmL1Y7rXIpX4i1sthdUnIiAE+ccun/mPL+x3C j777Qf33rWFbjr6d7Vb04qQotpCrMhxQ6nZhf9lu01NDZZmC7yO5VaTPpMVVgrjn jVHhjH2H8aduigYAGLJdwSSKmhkc9YwM7Ap7qCrk0xWosU+eoM71j+sxFa+fbKQ= -----END CERTIFICATE-----Generated at Fri Sep 19 16:04:27 2025 by rpki-client